CN103684968A - Access network deployment method, terminal equipment, network core equipment and system - Google Patents
Access network deployment method, terminal equipment, network core equipment and system Download PDFInfo
- Publication number
- CN103684968A CN103684968A CN201410003573.XA CN201410003573A CN103684968A CN 103684968 A CN103684968 A CN 103684968A CN 201410003573 A CN201410003573 A CN 201410003573A CN 103684968 A CN103684968 A CN 103684968A
- Authority
- CN
- China
- Prior art keywords
- ipv6
- terminal
- ipv4
- access server
- bas broadband
- Prior art date
- Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
- Granted
Links
Images
Abstract
The embodiments of the invention disclose an access network deployment method, terminal equipment, network core equipment and a system and relates to the technical field of the Internet. The access network deployment method is used for solving the problems in IPv4-IPv6 (Internet Protocol version 4 to Internet Protocol version 6) migration that the invested cost is too high and the influence on the existing networks is relatively large. The method comprises the steps that a terminal sends an access message to a broadband access server of IPv4 through a soft-terminal; the terminal receives an IPv6 address allocated by a broadband access server of IPv6 through the soft-terminal, wherein the IPv6 address is allocated for the terminal by the broadband access server of IPv6 according to the access message; the terminal allocates an IPv4 private address to the terminal through the soft-terminal; the terminal initiates IPv4 or IPv6 business access through the soft-terminal. The access network deployment method, the terminal equipment, the network core equipment and the system are applicable to Internet access technologies.
Description
Technical field
The present invention relates to Internet technical field, relate in particular to a kind of dispositions method, terminal equipment, network core device and system of Access Network.
Background technology
Along with IP(Internet Protocol in network, Internet protocol) increase of address need, IPv4 (Internet Protocol version4, internet protocol version 4) address exhausts gradually, solve the basic way of Address Run Short problem for replacing IPv4 with IPv6 (Internet Protocol version6, internet protocol version 6).At present the terminal in network and business be all based on IPv4, and IPv6 and IPv4 technology are incompatible, how to realize by IPv4 and become the subject matter that will solve to the migration of IPv6.The major programme that operator adopts is at present by double-stack technology and NAT (Network Address Translation, network address translation) technology combination, by the network element updating in whole network, or replaced with the equipment of supporting two stacks, and dispose NAT device at edge network, make subscriber equipment not only can access IPv4 network but also can access IPv6 network.
In prior art, at least there are the following problems: the method for being combined with NAT technology by double-stack technology is carried out upgrading to network need to drop into higher cost, and the implementation process time is longer; And on same hardware foundation platform, the introducing of IPv6 has greatly consumed the resource of existing network equipment, and existing network is had a huge impact.
Summary of the invention
Embodiments of the invention provide a kind of dispositions method, terminal equipment, network core device and system of Access Network, and in the time of can solving IPv4 and move to IPv6, input cost is too high, on the larger problem of existing network impact.
For achieving the above object, embodiments of the invention adopt following technical scheme:
First aspect, embodiments of the invention provide a kind of method of deployment of Access Network, the BAS Broadband Access Server that adds IPv6 in system, address transition router-A FTR, remote customer dialing authentication system and the software terminal of IPv6, described software terminal is arranged in described terminal, the remote customer dialing authentication system of described AFTR and described IPv6 connects with the BAS Broadband Access Server of described IPv6 respectively, the BAS Broadband Access Server of described IPv6 and described AFTR connect with backbone network, the BAS Broadband Access Server of described IPv6 and the BAS Broadband Access Server of described IPv4 connect, make described terminal by described software terminal access IPv6 business or IPv4 business, comprise:
Described terminal sends access message by described software terminal to the BAS Broadband Access Server of described IPv4, so that the BAS Broadband Access Server of described IPv4 forwards described access message to the BAS Broadband Access Server of described IPv6, initiates IPv6 user access network flow process;
Described terminal receives the IPv6 address of the BAS Broadband Access Server distribution of described IPv6 by described software terminal, the BAS Broadband Access Server that described IPV6 address is described IPv6 is that described terminal is distributed according to described access message;
Described terminal is described terminal distribution IPv4 private address by described software terminal;
Described terminal is initiated IPv4 Operational Visit or IPv6 Operational Visit by described software terminal.
Second aspect, embodiments of the invention provide a kind of dispositions method of Access Network, the BAS Broadband Access Server that adds IPv6 in system, address transition router-A FTR, remote customer dialing authentication system and the software terminal of IPv6, described software terminal is arranged in described terminal, the remote customer dialing authentication system of described AFTR and described IPv6 connects with the BAS Broadband Access Server of described IPv6 respectively, the BAS Broadband Access Server of described IPv6 and described AFTR connect with backbone network, the BAS Broadband Access Server of described IPv6 and the BAS Broadband Access Server of described IPv4 connect, make described terminal by described software terminal access IPv6 business or IPv4 business, comprise:
The BAS Broadband Access Server of described IPv6 receives the access message of the BAS Broadband Access Server transmission of described IPv4;
The BAS Broadband Access Server of described IPv6 sends authentication request to the remote customer dialing authentication system of described IPv6;
When the remote customer dialing authentication system of described IPv6 is during to described authorization terminal, the BAS Broadband Access Server of described IPv6 is to the IPv6 address of described terminal distribution.
The third aspect, embodiments of the invention provide a kind of terminal equipment, comprising:
Transmitting element, sends access message for BAS Broadband Access Server to IPv4, so that the BAS Broadband Access Server of described IPv4 forwards described access message to the BAS Broadband Access Server of IPv6, initiates IPv6 user access network flow process;
Dispatching Unit, for receive the IPv6 address of the BAS Broadband Access Server distribution of IPv6 by described software terminal, the BAS Broadband Access Server that described IPV6 address is described IPv6 is that described terminal is distributed according to described access message;
Allocation units, for being described terminal distribution IPv4 private address by described software terminal;
Initiate unit, for initiating IPv4 Operational Visit or IPv6 Operational Visit by described software terminal.
Fourth aspect, embodiments of the invention provide a kind of network core device, comprising:
Receiving element, the access message sending for receiving the BAS Broadband Access Server of IPv4;
Transmitting element, sends authentication request for the remote customer dialing authentication system to IPv6;
Dispatching Unit, for the remote customer dialing authentication system as described IPv6 during to authorization terminal, to the IPv6 address of described terminal distribution.
The 5th aspect, embodiments of the invention provide a kind of system of Access Network, comprising:
Described terminal, for the BAS Broadband Access Server transmission access message to IPv4 by described software terminal, initiates IPv6 user access network flow process;
The BAS Broadband Access Server of described IPv4, forwards described access message for the BAS Broadband Access Server to described IPv6;
The BAS Broadband Access Server of described IPv6, the access message sending for receiving the BAS Broadband Access Server of described IPv4; And, for the remote customer dialing authentication system to IPv6, send authentication request; And, for the remote customer dialing authentication system as described IPv6 during to authorization terminal, to the IPv6 address of described terminal distribution;
Described terminal is also for receiving the IPv6 address of the BAS Broadband Access Server distribution of IPv6 by described software terminal, the BAS Broadband Access Server that described IPV6 address is described IPv6 is that described terminal is distributed according to described access message; And, for being described terminal distribution IPv4 private address by described software terminal; And, for initiating IPv4 Operational Visit or IPv6 Operational Visit by described software terminal.
In prior art, the method for being combined with NAT technology by double-stack technology is carried out upgrading to network need to drop into higher cost, and the implementation process time is longer; And on same hardware foundation platform, the introducing of IPv6 has greatly consumed the resource of existing network equipment, and existing network is had a huge impact.Compared with prior art, the dispositions method of the Access Network that the embodiment of the present invention provides, terminal equipment, network core device and system, in system, add the BAS Broadband Access Server of IPv6, remote customer dialing authentication system and the software terminal of address transition router-A FTR, IPv6, software terminal is arranged in terminal, terminal is the BAS Broadband Access Server transmission access message to IPv4 by software terminal, initiates IPv6 user access network flow process; The BAS Broadband Access Server of IPv6 receives after access message, the remote customer dialing authentication system transmission authentication request according to access message to IPv6; When the remote customer dialing authentication system of described IPv6 is during to authorization terminal, the BAS Broadband Access Server of IPv6 is to the IPv6 address of terminal distribution; Terminal receives the IPv6 address of the BAS Broadband Access Server distribution of IPv6 by software terminal, and to obtain software terminal be terminal distribution IPv4 private address; Terminal is initiated IPv4 Operational Visit or IPv6 Operational Visit by software terminal.The equipment that adds access IPv6 network in existing system, terminal is by the BAS Broadband Access Server access IPv6 network of software terminal and IPv6, can access IPv4 business or IPv6 business, do not need the equipment in whole network to transform, input cost is low, less to existing equipments resources consumption, reduced the impact on existing network.
Accompanying drawing explanation
In order to be illustrated more clearly in the technical scheme in the embodiment of the present invention, to the accompanying drawing of required use in embodiment be briefly described below, apparently, accompanying drawing in the following describes is only some embodiments of the present invention, for those of ordinary skills, do not paying under the prerequisite of creative work, can also obtain according to these accompanying drawings other accompanying drawing.
The method flow diagram that Fig. 1 provides for one embodiment of the invention;
The method flow diagram that Fig. 2 provides for further embodiment of this invention;
The network architecture diagram that Fig. 3 provides for further embodiment of this invention;
The method flow diagram that Fig. 4 provides for further embodiment of this invention;
The terminal equipment structural representation that Fig. 5, Fig. 6 provide for further embodiment of this invention;
The network core device structural representation that Fig. 7, Fig. 8 provide for further embodiment of this invention;
The system configuration schematic diagram that Fig. 9 provides for further embodiment of this invention.
Embodiment
Below in conjunction with the accompanying drawing in the embodiment of the present invention, the technical scheme in the embodiment of the present invention is clearly and completely described, obviously, described embodiment is only the present invention's part embodiment, rather than whole embodiment.Embodiment based in the present invention, those of ordinary skills, not making all other embodiment that obtain under creative work prerequisite, belong to the scope of protection of the invention.
One embodiment of the invention provides a kind of dispositions method of Access Network, for the Internet access technology, the BAS Broadband Access Server that adds IPv6 in the system that the BAS Broadband Access Server of terminal and IPv4 forms, AFTR(Address Family Transition Router, address transition router), remote customer dialing authentication system and the software terminal of IPv6, software terminal is arranged in terminal, the remote customer dialing authentication system of AFTR and IPv6 connects with the BAS Broadband Access Server of IPv6 respectively, the BAS Broadband Access Server of IPv6 and AFTR connect with backbone network, the BAS Broadband Access Server of IPv6 and the BAS Broadband Access Server of IPv4 connect, terminal is only supported IPv4 agreement.As shown in Figure 1, described method comprises:
101, terminal sends access message by software terminal to the BAS Broadband Access Server of IPv4.
Wherein, terminal is the BAS Broadband Access Server transmission access message to IPv4 by software terminal, access message, by IPv6 protocol encapsulation, so that the BAS Broadband Access Server of IPv4 is to the BAS Broadband Access Server forwarding access message of IPv6, is initiated IPv6 user access network flow process.
102, terminal receives the IPv6 address of the BAS Broadband Access Server distribution of IPv6 by software terminal.
Wherein, the BAS Broadband Access Server that IPV6 address is IPv6 is that terminal is distributed according to access message.
103, terminal is terminal distribution IPv4 private address by software terminal.
104, terminal is initiated IPv4 Operational Visit or IPv6 Operational Visit by software terminal.
Wherein, when terminal is initiated IPv4 Operational Visit by software terminal, terminal is used IPv4 private address to AFTR, to send IPv4 data flow by software terminal, so that AFTR is converted to the IPv4 private address of IPv4 data flow the publicly-owned address of IPv4 and the IPv4 data flow after conversion is sent to backbone network.
It should be noted that, before terminal use IPv4 private address sends IPv4 data flow by software terminal to AFTR, terminal is set up IP tunnel by software terminal and AFTR, and IPv4 data flow is encapsulated by software terminal according to IPv6 agreement, to transmit corresponding IPv4 data flow.
In prior art, the method for being combined with NAT technology by double-stack technology is carried out upgrading to network need to drop into higher cost, and the implementation process time is longer; And on same hardware foundation platform, the introducing of IPv6 has greatly consumed the resource of existing network equipment, and existing network is had a huge impact.Compared with prior art, the embodiment of the present invention adds the BAS Broadband Access Server of IPv6 in system, address transition router-A FTR, remote customer dialing authentication system and the software terminal of IPv6, software terminal is arranged in terminal, terminal is the BAS Broadband Access Server transmission access message to IPv4 by software terminal, initiate IPv6 user access network flow process, then by software terminal, receive the IPv6 address of the BAS Broadband Access Server distribution of IPv6, and to obtain software terminal be terminal distribution IPv4 private address, and then terminal is initiated IPv4 Operational Visit or IPv6 Operational Visit by software terminal.The equipment that adds access IPv6 network in existing system, terminal is by the BAS Broadband Access Server access IPv6 network of software terminal and IPv6, can access IPv4 business or IPv6 business, do not need the equipment in whole network to transform, input cost is low, less to existing equipments resources consumption, reduced the impact on existing network.
Further embodiment of this invention provides a kind of dispositions method of Access Network, for the Internet access technology, the BAS Broadband Access Server that adds IPv6 in the system that the BAS Broadband Access Server of terminal and IPv4 forms, address transition router-A FTR, remote customer dialing authentication system and the software terminal of IPv6, software terminal is arranged in terminal, the remote customer dialing authentication system of AFTR and IPv6 connects with the BAS Broadband Access Server of IPv6 respectively, the BAS Broadband Access Server of IPv6 and AFTR connect with backbone network, the BAS Broadband Access Server of IPv6 and the BAS Broadband Access Server of IPv4 connect, terminal is only supported IPv4 agreement, as shown in Figure 2, described method comprises:
201, the BAS Broadband Access Server of IPv6 receives the access message of the BAS Broadband Access Server transmission of IPv4.
Wherein, before the BAS Broadband Access Server of IPv6 receives the access message that the BAS Broadband Access Server of IPv4 sends, the BAS Broadband Access Server of IPv6 is set up the Virtual Private Dialup Network VPDN tunnel with the BAS Broadband Access Server of IPv4.
202, the BAS Broadband Access Server of IPv6 sends authentication request to the remote customer dialing authentication system of IPv6.
203, when the remote customer dialing authentication system of IPv6 is during to authorization terminal, the BAS Broadband Access Server of IPv6 is to the IPv6 address of terminal distribution.
In prior art, the method for being combined with NAT technology by double-stack technology is carried out upgrading to network need to drop into higher cost, and the implementation process time is longer; And on same hardware foundation platform, the introducing of IPv6 has greatly consumed the resource of existing network equipment, and existing network is had a huge impact.Compared with prior art, the embodiment of the present invention, in system, add the BAS Broadband Access Server of IPv6, remote customer dialing authentication system and the software terminal of address transition router-A FTR, IPv6, software terminal is arranged in terminal, the BAS Broadband Access Server of IPv6 receives after access message, the remote customer dialing authentication system transmission authentication request according to access message to IPv6; When the remote customer dialing authentication system of described IPv6 is during to authorization terminal, the BAS Broadband Access Server of IPv6 is to the IPv6 address of terminal distribution.The equipment that adds access IPv6 network in existing system, terminal is by the BAS Broadband Access Server access IPv6 network of software terminal and IPv6, can access IPv4 business or IPv6 business, do not need the equipment in whole network to transform, input cost is low, less to existing equipments resources consumption, reduced the impact on existing network.
Further embodiment of this invention provides a kind of dispositions method of Access Network, for the Internet access technology, the BRAS(Broadband Remote Access Server that has added IPv6 in existing network, BAS Broadband Access Server), the RADIUS(Remote Authentication Dial In User Service of IPv6, remote customer dialing authentication system) and AFTR, and in terminal PC (Personal Computer, PC), software terminal has been installed.PC, for only to support the terminal equipment of IPv4 agreement, software terminal to be realized by software, comprising: protocol translation module, makes PC can normally access IPv6 service application; Module is set up in tunnel, is used for consulting the pattern in tunnel, the foundation of charge tunnel, maintenance and dismounting; Tunnel encapsulation and decapsulation module, for encapsulating the message module of conciliating encapsulation tunnel transmission.As shown in Figure 3, BRAS1 is the edge access control point of IPv4 network, supports the distribution of the publicly-owned address of IPv4, and by RADIUS1, PC is authenticated; RADIUS1 supports IPv4 user's authentication，authorization，accounting function; BRAS2 is the edge access control point of IPv6 network, supports the distribution of IPv6 address, and by RADIUS2, PC is authenticated, and between BRAS1 and BRAS2, support the foundation in tunnel, for example VPDN tunnel can carry out transfer of data between BRAS1 and BRAS2; RADIUS2 supports IPv6 user's authentication，authorization，accounting function; It is upper that software terminal is built in PC, by with BRAS2 information interaction, obtain IPv6 address, and to PC distributing IP v4 private address; AFTR supports NAT conversion, IPv4 private address can be converted to the publicly-owned address of IPv4, supports the foundation in tunnel between software terminal and AFTR, can carry out transfer of data.As shown in Figure 4, described method comprises:
301, PC sends the access message of access IPv6 network to BRAS1 by software terminal.
Wherein, PC is after installing software terminal, and when user need to access IPv6 network, PC starts Access Network flow process by software terminal.With PPPoE(Point-to-point Protocol Over Ethernet, Point-to-Point Protocol over Ethernet) Access Network flow process is example, first PC sends the access message of PPPoEv6 agreement to BRAS1 by software terminal.
It should be noted that, the upper interface that access IPv4 network and IPv6 network can be set respectively of PC, when user need to access IPv4 network or IPv6 network, starts Access Network flow process from corresponding interface.
302, between BRAS1 and BRAS2, set up VPDN tunnel.
Wherein, BRAS1, after receiving the message that PC broadcasts by software terminal, sets up VPDN tunnel, to carry out transfer of data between BRAS1 and BRAS2 between BRAS1 and BRAS2.Tunneling technique is a kind of by using the infrastructure of internet to transmit the mode of data between network, using the data of tunnel transmission can be Frame or the packet of different agreement, and then tunnel protocol sends the Frame of other agreement or packet Reseal by tunnel.VPDN tunnel protocol has PPTP, layer 2 forwarding protocol, Level 2 Tunnel Protocol etc.
It should be noted that, BRAS1 can distinguish by the type of message the access message for PC access IPv6 network of reception, or the access message of PC access IPv4 network, when BRAS1 receives the access message of access IPv6 network of PC, trigger between BRAS1 and BRAS2 and set up VPDN tunnel, corresponding data transmits in tunnel.
303, BRAS1 forwards access message to BRAS2.
Wherein, setting up behind VPDN tunnel between BRAS1 and BRAS2, BRAS1 according to after the encapsulation of VPDN tunnel protocol, is transmitted to BRAS2 by VPDN tunnel by the access message receiving, so that PC continues to carry out the flow process of Access Network.
304, BRAS2 sends authentication request to RADIUS2.
Wherein, in Access Network flow process, need to carry out authentication and authorization to username and password, these complete by RADIUS2, and BRAS2 sends authentication request to RADIUS2.
305, RADIUS2 carries out authentication and authorization to the username and password of PC.
Wherein, PC carries out Access Network flow process, carries out data interaction with BRAS2.BRAS2 obtains pc user's name and password, and BRAS2 can carry out local authentication, can also username and password be authenticated by RADIUS2 agreement.After authentication is passed through, BRAS2 is to PC distribution network layer parameter, such as IP address etc.
306, RADIUS2 sends authorization notification to BRAS2.
307, RADIUS2 starts charging flow.
308, BRAS2 is to software terminal distributing ip v6 address.
Wherein, after username and password is by authentication and authorization, need to be to PC distributing ip v6 address, so that user uses IPv6 address access IPv6 network, because PC is for only supporting the terminal equipment of IPv4 agreement, therefore need to assist PC access IPv6 network by software terminal, BRAS2 is to software terminal distributing ip v6 address.
309, software terminal is to PC distributing IP v4 private address.
Wherein, BRAS2 accesses IPv6 business for PC by software terminal to software terminal distributing ip v6 address.Because PC is the equipment that is applicable to access IPv4 business, PC is that PC distributing IP v4 private address and software terminal carry out transfer of data by software terminal.
It should be noted that, by step 301, to step 308, PC completes the flow process of access IPv6 network, can conduct interviews to backbone network.
310, PC sends visit data stream to software terminal.
Wherein, after PC access IPv6 network, PC can conduct interviews to the business in backbone network by software terminal, to software terminal, sends the visit data stream of accesses network business.PC sends the IPv4 private address that the visit data stream of visiting comprises PC.
311, software terminal is converted to IPv6 address by IPv4 private address.
Wherein, due to current PC access be IPv6 network, so software terminal is converted to IPv6 address by the IPv4 private address in visit data.
312, software terminal is sent to BRAS1 by visit data stream.
313, BRAS1 is sent to BRAS2 by VPDN tunnel by visit data stream.
314, BRAS2 is sent to IPv6 backbone network by visit data stream.
315, the type of service of IPv6 backbone network judgement pc access is IPv6 business or IPv4 business, if pc access is IPv6 business, performs step 316; If pc access is IPv4 business, perform step 317.
Wherein, IPv6 backbone network is analyzed visit data stream, judges whether the network address of pc access or domain name belong to IPv6 network, if the network address of pc access or domain name belong to IPv6 network, what represent pc access is IPv6 business, performs step 316; If the network address of pc access or domain name belong to IPv4 network, what represent pc access is IPv4 business, performs step 317.
316, IPv6 backbone network transmission visit data flow to the IPv6 service server that PC will access.
What 317, IPv6 backbone network was replied software terminal pc access by BRAS1 and BRAS2 is IPv4 business.
Wherein, due to pc access be IPv4 business, IPv6 backbone network is replied software terminal by message.
318, the IP tunnel of software terminal foundation and AFTR.
Wherein, software terminal, after receiving the reply of IPv6 backbone network, triggers between software terminal and AFTR and sets up IP tunnel, to the visit data of PC is sent to IPv4 backbone network.
319, software terminal is according to the visit data stream of IP tunneling protocol encapsulation PC.
320, software terminal is sent to AFTR by BRAS1 and BRAS2 by the visit data stream of encapsulation.
321, AFTR decapsulation visit data stream.
322, AFTR is converted to the publicly-owned address of IPv4 by the IPv4 private address of visit data stream.
Wherein, IPv4 private address belongs to non-registered address, while using IPv4 private address networking network, IPv4 private address need to be converted to the publicly-owned address of IPv4.Address translation process is called network address translation, in the embodiment of the present invention, and the conversion of AFTR executive address.
323, AFTR is sent to IPv4 backbone network by the visit data stream after conversion.
In prior art, the method for being combined with NAT technology by double-stack technology is carried out upgrading to network need to drop into higher cost, and the implementation process time is longer; And on same hardware foundation platform, the introducing of IPv6 has greatly consumed the resource of existing network equipment, and existing network is had a huge impact.Compared with prior art, in the embodiment of the present invention, add BRAS2, AFTR, RADIUS2 and software terminal in system, software terminal is arranged in PC, and PC sends access message to BRAS1, initiates IPv6 user access network flow process; BRAS2 receives after access message, according to access message, to RADIUS2, sends authentication request; When RADIUS2 authorizes PC, BRAS2 is to the IPv6 address of PC distribution; PC receives the IPv6 address of BRAS2 distribution by software terminal, and to obtain software terminal be PC distributing IP v4 private address; PC initiates IPv4 Operational Visit or IPv6 Operational Visit by software terminal.The equipment that adds access IPv6 network in existing system, PC is by software terminal and BRAS2 access IPv6 network, can access IPv4 business or IPv6 business, do not need the equipment in whole network to transform, input cost is low, less to existing equipments resources consumption, reduced the impact on existing network.
Further embodiment of this invention provides a kind of terminal equipment 40, and as shown in Figure 5, described terminal equipment 40 comprises:
Transmitting element 41, sends access message for BAS Broadband Access Server to IPv4, so that the BAS Broadband Access Server of described IPv4 forwards described access message to the BAS Broadband Access Server of IPv6, initiates IPv6 user access network flow process;
Further, described transmitting element 41 is also for using described IPv4 private address to send IPv4 data flow by described software terminal to address transition router-A FTR, so that described AFTR is converted to the IPv4 private address of described IPv4 data flow the publicly-owned address of IPv4 and the described IPv4 data flow after conversion is sent to backbone network.
Further, as shown in Figure 6, described terminal equipment 40 also comprises:
Set up unit 45, for setting up IP tunnel by described software terminal and described AFTR;
Encapsulation unit 46, for encapsulating described IPv4 data flow by described software terminal according to IPv6 agreement.
In prior art, the method for being combined with NAT technology by double-stack technology is carried out upgrading to network need to drop into higher cost, and the implementation process time is longer; And on same hardware foundation platform, the introducing of IPv6 has greatly consumed the resource of existing network equipment, and existing network is had a huge impact.Compared with prior art, the embodiment of the present invention adds the BAS Broadband Access Server of IPv6 in system, address transition router-A FTR, remote customer dialing authentication system and the software terminal of IPv6, software terminal is arranged in terminal equipment 40, terminal equipment 40 is the BAS Broadband Access Server transmission access message to IPv4 by software terminal, initiate IPv6 user access network flow process, then by software terminal, receive the IPv6 address of the BAS Broadband Access Server distribution of IPv6, and obtain software terminal distributing IP v4 private address, and then terminal equipment 40 is initiated IPv4 Operational Visit or IPv6 Operational Visit by software terminal.The equipment that adds access IPv6 network in existing system, terminal equipment 40 is by the BAS Broadband Access Server access IPv6 network of software terminal and IPv6, can access IPv4 business or IPv6 business, do not need the equipment in whole network to transform, input cost is low, less to existing equipments resources consumption, reduced the impact on existing network.
Further embodiment of this invention provides a kind of network core device 50, and as shown in Figure 7, described network core device 50 comprises:
Receiving element 51, the access message sending for receiving the BAS Broadband Access Server of IPv4;
Transmitting element 52, sends authentication request for the remote customer dialing authentication system to IPv6;
Further, as shown in Figure 8, described network core device 50 also comprises:
Set up unit 54, for setting up the Virtual Private Dialup Network VPDN tunnel with the BAS Broadband Access Server of described IPv4.
In prior art, the method for being combined with NAT technology by double-stack technology is carried out upgrading to network need to drop into higher cost, and the implementation process time is longer; And on same hardware foundation platform, the introducing of IPv6 has greatly consumed the resource of existing network equipment, and existing network is had a huge impact.Compared with prior art, the embodiment of the present invention, the remote customer dialing authentication system and the software terminal that in system, add network core device 50, address transition router-A FTR, IPv6, software terminal is arranged in terminal, network core device 50 receives after access message, the remote customer dialing authentication system transmission authentication request according to access message to IPv6; When the remote customer dialing authentication system of described IPv6 is during to authorization terminal, network core device 50 is to the IPv6 address of terminal distribution.The equipment that adds access IPv6 network in existing system, terminal is by software terminal and network core device 50 access IPv6 networks, can access IPv4 business or IPv6 business, do not need the equipment in whole network to transform, input cost is low, less to existing equipments resources consumption, reduced the impact on existing network.
Further embodiment of this invention provides a kind of system 60 of Access Network, as shown in Figure 9, the system 60 of described Access Network comprises: terminal 61, the BAS Broadband Access Server 62 of IPv4, the BAS Broadband Access Server 63 of IPv6, address transition router-A FTR64, the remote customer dialing authentication system 65 of IPv6, described software terminal is arranged in described terminal 61, the remote customer dialing authentication system 65 of described AFTR64 and described IPv6 connects with the BAS Broadband Access Server 63 of described IPv6 respectively, BAS Broadband Access Server 63 and the described AFTR64 of described IPv6 connect with backbone network, the BAS Broadband Access Server 63 of described IPv6 and the BAS Broadband Access Server of described IPv4 62 connect, make described terminal 61 by described software terminal access IPv6 business or IPv4 business,
Described terminal 61, for the BAS Broadband Access Server 62 transmission access messages to described IPv4 by described software terminal, initiates IPv6 user access network flow process;
The BAS Broadband Access Server 62 of described IPv4, forwards described access message for the BAS Broadband Access Server 63 to described IPv6;
The BAS Broadband Access Server 63 of described IPv6, the access message sending for receiving the BAS Broadband Access Server 62 of described IPv4; And, for the remote customer dialing authentication system 65 to IPv6, send authentication request; And, during for 65 pairs of authorization terminals of remote customer dialing authentication system as described IPv6, to the IPv6 address of described terminal 61 distributions;
Described terminal 61 is also for receive the IPv6 address of BAS Broadband Access Server 63 distributions of IPv6 by described software terminal, and the BAS Broadband Access Server 63 that described IPV6 address is described IPv6 is that described terminal 61 is distributed according to described access message; And, for by described software terminal being described terminal 61 distributing IP v4 private address; And, for initiating IPv4 Operational Visit or IPv6 Operational Visit by described software terminal.
Further, described terminal 61 is also for being used described IPv4 private address to send IPv4 data flow by described software terminal to address transition router-A FTR64;
Described AFTR64, for being converted to the IPv4 private address of described IPv4 data flow the publicly-owned address of IPv4 and the described IPv4 data flow after conversion being sent to backbone network.
Further, described terminal 61 is also for setting up IP tunnel by described software terminal and described AFTR64; And, for described IPv4 data flow being encapsulated by described software terminal according to IPv6 agreement.
Further, the BAS Broadband Access Server 63 of described IPv6 is also for setting up the Virtual Private Dialup Network VPDN tunnel with the BAS Broadband Access Server 62 of described IPv4.
In prior art, the method for being combined with NAT technology by double-stack technology is carried out upgrading to network need to drop into higher cost, and the implementation process time is longer; And on same hardware foundation platform, the introducing of IPv6 has greatly consumed the resource of existing network equipment, and existing network is had a huge impact.Compared with prior art, the embodiment of the present invention adds the BAS Broadband Access Server 63 of IPv6, remote customer dialing authentication system 65 and the software terminal of address transition router-A FTR64, IPv6 in system, software terminal is arranged in terminal 61, terminal 61 sends access message to the BAS Broadband Access Server 62 by software terminal IPv4, initiates IPv6 user access network flow process; The BAS Broadband Access Server 63 of IPv6 receives after access message, the remote customer dialing authentication system 65 transmission authentication request according to access message to IPv6; When 65 pairs of terminals of remote customer dialing authentication system 61 of described IPv6 are authorized, the BAS Broadband Access Server 63 of IPv6 is to the IPv6 address of terminal 61 distributions; Terminal 61 receives the IPv6 address of BAS Broadband Access Server 63 distribution of IPv6 by software terminal, and to obtain software terminal be terminal 61 distributing IP v4 private address; Terminal 61 is initiated IPv4 Operational Visit or IPv6 Operational Visit by software terminal.The equipment that adds access IPv6 network in existing system, terminal 61 is by the BAS Broadband Access Server 63 access IPv6 networks of software terminal and IPv6, can access IPv4 business or IPv6 business, do not need the equipment in whole network to transform, input cost is low, less to existing equipments resources consumption, reduced the impact on existing network.
The above-mentioned embodiment of the method providing can be provided for the terminal equipment of the Access Network that the embodiment of the present invention provides, network core device and system, and concrete function is realized and referred to the explanation in embodiment of the method, does not repeat them here.The dispositions method of the Access Network that the embodiment of the present invention provides, terminal equipment, network core device and system go for the Internet access technology, but are not limited only to this.
Each embodiment in this specification all adopts the mode of going forward one by one to describe, between each embodiment identical similar part mutually referring to, each embodiment stresses is the difference with other embodiment.Especially, for apparatus embodiments, because it is substantially similar in appearance to embodiment of the method, so describe fairly simplely, relevant part is referring to the part explanation of embodiment of the method.
One of ordinary skill in the art will appreciate that all or part of flow process realizing in above-described embodiment method, to come the hardware that instruction is relevant to complete by computer program, described program can be stored in a computer read/write memory medium, this program, when carrying out, can comprise as the flow process of the embodiment of above-mentioned each side method.Wherein, described storage medium can be magnetic disc, CD, read-only store-memory body (Read-Only Memory, ROM) or random store-memory body (Random Access Memory, RAM) etc.
The above; be only the specific embodiment of the present invention, but protection scope of the present invention is not limited to this, is anyly familiar with those skilled in the art in the technical scope that the present invention discloses; the variation that can expect easily or replacement, within all should being encompassed in protection scope of the present invention.Therefore, protection scope of the present invention should be as the criterion with the protection range of claim.
Claims (14)
1. the dispositions method of an Access Network, be applied in system that the BAS Broadband Access Server of terminal and IPv4 forms, it is characterized in that, the BAS Broadband Access Server that adds IPv6 in system, address transition router-A FTR, remote customer dialing authentication system and the software terminal of IPv6, described software terminal is arranged in described terminal, the remote customer dialing authentication system of described AFTR and described IPv6 connects with the BAS Broadband Access Server of described IPv6 respectively, the BAS Broadband Access Server of described IPv6 and described AFTR connect with backbone network, the BAS Broadband Access Server of described IPv6 and the BAS Broadband Access Server of described IPv4 connect, make described terminal by described software terminal access IPv6 business or IPv4 business, comprise:
Described terminal sends access message by described software terminal to the BAS Broadband Access Server of described IPv4, so that the BAS Broadband Access Server of described IPv4 forwards described access message to the BAS Broadband Access Server of described IPv6, initiates IPv6 user access network flow process;
Described terminal receives the IPv6 address of the BAS Broadband Access Server distribution of described IPv6 by described software terminal, the BAS Broadband Access Server that described IPV6 address is described IPv6 is that described terminal is distributed according to described access message;
Described terminal is described terminal distribution IPv4 private address by described software terminal;
Described terminal is initiated IPv4 Operational Visit or IPv6 Operational Visit by described software terminal.
2. method according to claim 1, is characterized in that, when described terminal is initiated IPv4 Operational Visit by described software terminal, described method also comprises:
Described terminal is used described IPv4 private address to described AFTR, to send IPv4 data flow by described software terminal, so that described AFTR is converted to the IPv4 private address of described IPv4 data flow the publicly-owned address of IPv4 and the described IPv4 data flow after conversion is sent to backbone network.
3. method according to claim 2, is characterized in that, in described terminal, uses before described IPv4 private address sends IPv4 data flow by described software terminal to described AFTR, and described method also comprises:
Described terminal is set up IP tunnel by described software terminal and described AFTR;
Described terminal encapsulates described IPv4 data flow by described software terminal according to IPv6 agreement.
4. the dispositions method of an Access Network, be applied in system that the BAS Broadband Access Server of terminal and IPv4 forms, it is characterized in that, the BAS Broadband Access Server that adds IPv6 in system, address transition router-A FTR, remote customer dialing authentication system and the software terminal of IPv6, described software terminal is arranged in described terminal, the remote customer dialing authentication system of described AFTR and described IPv6 connects with the BAS Broadband Access Server of described IPv6 respectively, the BAS Broadband Access Server of described IPv6 and described AFTR connect with backbone network, the BAS Broadband Access Server of described IPv6 and the BAS Broadband Access Server of described IPv4 connect, make described terminal by described software terminal access IPv6 business or IPv4 business, comprise:
The BAS Broadband Access Server of described IPv6 receives the access message of the BAS Broadband Access Server transmission of described IPv4;
The BAS Broadband Access Server of described IPv6 sends authentication request to the remote customer dialing authentication system of described IPv6;
When the remote customer dialing authentication system of described IPv6 is during to described authorization terminal, the BAS Broadband Access Server of described IPv6 is to the IPv6 address of described terminal distribution.
5. method according to claim 4, is characterized in that, before the BAS Broadband Access Server of described IPv6 receives the access message that the BAS Broadband Access Server of described IPv4 sends, described method also comprises:
The BAS Broadband Access Server foundation of described IPv6 and the Virtual Private Dialup Network VPDN tunnel of the BAS Broadband Access Server of described IPv4.
6. a terminal equipment, is characterized in that, comprising:
Transmitting element, sends access message for BAS Broadband Access Server to IPv4, so that the BAS Broadband Access Server of described IPv4 forwards described access message to the BAS Broadband Access Server of IPv6, initiates IPv6 user access network flow process;
Dispatching Unit, for receive the IPv6 address of the BAS Broadband Access Server distribution of described IPv6 by described software terminal, the BAS Broadband Access Server that described IPV6 address is described IPv6 is that described terminal is distributed according to described access message;
Allocation units, for being described terminal distribution IPv4 private address by described software terminal;
Initiate unit, for initiating IPv4 Operational Visit or IPv6 Operational Visit by described software terminal.
7. terminal equipment according to claim 6, it is characterized in that, described transmitting element is also for using described IPv4 private address to send IPv4 data flow by described software terminal to address transition router-A FTR, so that described AFTR is converted to the IPv4 private address of described IPv4 data flow the publicly-owned address of IPv4 and the described IPv4 data flow after conversion is sent to backbone network.
8. terminal equipment according to claim 7, is characterized in that, described terminal equipment also comprises:
Set up unit, for setting up IP tunnel by described software terminal and described AFTR;
Encapsulation unit, for encapsulating described IPv4 data flow by described software terminal according to IPV6 agreement.
9. a network core device, is characterized in that, comprising:
Receiving element, the access message sending for receiving the BAS Broadband Access Server of IPv4;
Transmitting element, sends authentication request for the remote customer dialing authentication system to IPv6;
Dispatching Unit, for the remote customer dialing authentication system as described IPv6 during to authorization terminal, to the IPv6 address of described terminal distribution.
10. network core device according to claim 9, is characterized in that, described network core device also comprises:
Set up unit, for setting up the Virtual Private Dialup Network VPDN tunnel with the BAS Broadband Access Server of described IPv4.
The system of 11. 1 kinds of Access Networks, it is characterized in that, comprise: terminal, the BAS Broadband Access Server of IPv4, the BAS Broadband Access Server of IPv6, address transition router-A FTR, remote customer dialing authentication system and the software terminal of IPv6, described software terminal is arranged in described terminal, the remote customer dialing authentication system of described AFTR and described IPv6 connects with the BAS Broadband Access Server of described IPv6 respectively, the BAS Broadband Access Server of described IPv6 and described AFTR connect with backbone network, the BAS Broadband Access Server of described IPv6 and the BAS Broadband Access Server of described IPv4 connect, make described terminal by described software terminal access IPv6 business or IPv4 business,
Described terminal, for the BAS Broadband Access Server transmission access message to IPv4 by described software terminal, initiates IPv6 user access network flow process;
The BAS Broadband Access Server of described IPv4, forwards described access message for the BAS Broadband Access Server to described IPv6;
The BAS Broadband Access Server of described IPv6, the access message sending for receiving the BAS Broadband Access Server of described IPv4; And, for the remote customer dialing authentication system to IPv6, send authentication request; And, for the remote customer dialing authentication system as described IPv6 during to authorization terminal, to the IPv6 address of described terminal distribution;
Described terminal is also for receiving the IPv6 address of the BAS Broadband Access Server distribution of IPv6 by described software terminal, the BAS Broadband Access Server that described IPV6 address is described IPv6 is that described terminal is distributed according to described access message; And, for being described terminal distribution IPv4 private address by described software terminal; And, for initiating IPv4 Operational Visit or IPv6 Operational Visit by described software terminal.
12. systems according to claim 11, is characterized in that, described terminal is also for being used described IPv4 private address to send IPv4 data flow by described software terminal to address transition router-A FTR;
Described AFTR, for being converted to the IPv4 private address of described IPv4 data flow the publicly-owned address of IPv4 and the described IPv4 data flow after conversion being sent to backbone network.
13. systems according to claim 12, is characterized in that, described terminal is also for setting up IP tunnel by described software terminal and described AFTR; And, for described IPv4 data flow being encapsulated by described software terminal according to IPv6 agreement.
14. systems according to claim 11, is characterized in that, the BAS Broadband Access Server of described IPv6 is also for setting up the Virtual Private Dialup Network VPDN tunnel with the BAS Broadband Access Server of described IPv4.
Priority Applications (1)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| CN201410003573.XA CN103684968B (en) | 2014-01-03 | 2014-01-03 | Access network deployment method, terminal equipment, network core equipment and system |
Applications Claiming Priority (1)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| CN201410003573.XA CN103684968B (en) | 2014-01-03 | 2014-01-03 | Access network deployment method, terminal equipment, network core equipment and system |
Publications (2)
| Publication Number | Publication Date |
|---|---|
| CN103684968A true CN103684968A (en) | 2014-03-26 |
| CN103684968B CN103684968B (en) | 2017-04-12 |
Family
ID=50321341
Family Applications (1)
| Application Number | Title | Priority Date | Filing Date |
|---|---|---|---|
| CN201410003573.XA Active CN103684968B (en) | 2014-01-03 | 2014-01-03 | Access network deployment method, terminal equipment, network core equipment and system |
Country Status (1)
| Country | Link |
|---|---|
| CN (1) | CN103684968B (en) |
Cited By (3)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN104980366A (en) * | 2014-04-10 | 2015-10-14 | 中国电信股份有限公司 | Method and system for performing strategy safeguard on double-stack user flow |
| WO2017000122A1 (en) * | 2015-06-29 | 2017-01-05 | 华为技术有限公司 | Dual stack address management method and first network element |
| CN112738132A (en) * | 2021-01-27 | 2021-04-30 | 华北石油通信有限公司 | Secondary authentication access system and method thereof |
Citations (9)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN101175043A (en) * | 2007-11-21 | 2008-05-07 | 中兴通讯股份有限公司 | System and method for supporting IPv6 terminal access to IPv4 core net |
| CN101610156A (en) * | 2009-08-04 | 2009-12-23 | 杭州华三通信技术有限公司 | A kind of method of dual protocol stack user authentication, equipment and system |
| CN101951380A (en) * | 2010-09-28 | 2011-01-19 | 杭州华三通信技术有限公司 | Access control method and device used therein in dual-stack lite network |
| CN102170395A (en) * | 2011-04-21 | 2011-08-31 | 中兴通讯股份有限公司 | Data transmission method and network equipment |
| CN102368786A (en) * | 2011-11-11 | 2012-03-07 | 中国联合网络通信集团有限公司 | Load balancing method and system |
| CN102377671A (en) * | 2011-11-02 | 2012-03-14 | 中国联合网络通信集团有限公司 | Load balancing method and system and broadband remote access server equipment |
| CN102546568A (en) * | 2010-12-31 | 2012-07-04 | 华为技术有限公司 | Method and device for Internet protocol (IP) terminal being accessed into network |
| CN102572008A (en) * | 2010-12-08 | 2012-07-11 | 中国电信股份有限公司 | Communication service processing method and system and gateway equipment |
| CN103004173A (en) * | 2012-09-29 | 2013-03-27 | 华为技术有限公司 | Address allocation method, device and system thereof |
-
2014
- 2014-01-03 CN CN201410003573.XA patent/CN103684968B/en active Active
Patent Citations (9)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN101175043A (en) * | 2007-11-21 | 2008-05-07 | 中兴通讯股份有限公司 | System and method for supporting IPv6 terminal access to IPv4 core net |
| CN101610156A (en) * | 2009-08-04 | 2009-12-23 | 杭州华三通信技术有限公司 | A kind of method of dual protocol stack user authentication, equipment and system |
| CN101951380A (en) * | 2010-09-28 | 2011-01-19 | 杭州华三通信技术有限公司 | Access control method and device used therein in dual-stack lite network |
| CN102572008A (en) * | 2010-12-08 | 2012-07-11 | 中国电信股份有限公司 | Communication service processing method and system and gateway equipment |
| CN102546568A (en) * | 2010-12-31 | 2012-07-04 | 华为技术有限公司 | Method and device for Internet protocol (IP) terminal being accessed into network |
| CN102170395A (en) * | 2011-04-21 | 2011-08-31 | 中兴通讯股份有限公司 | Data transmission method and network equipment |
| CN102377671A (en) * | 2011-11-02 | 2012-03-14 | 中国联合网络通信集团有限公司 | Load balancing method and system and broadband remote access server equipment |
| CN102368786A (en) * | 2011-11-11 | 2012-03-07 | 中国联合网络通信集团有限公司 | Load balancing method and system |
| CN103004173A (en) * | 2012-09-29 | 2013-03-27 | 华为技术有限公司 | Address allocation method, device and system thereof |
Cited By (4)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN104980366A (en) * | 2014-04-10 | 2015-10-14 | 中国电信股份有限公司 | Method and system for performing strategy safeguard on double-stack user flow |
| CN104980366B (en) * | 2014-04-10 | 2018-04-06 | 中国电信股份有限公司 | For double stack customer flows to be carried out with the method and system of tactful guarantee |
| WO2017000122A1 (en) * | 2015-06-29 | 2017-01-05 | 华为技术有限公司 | Dual stack address management method and first network element |
| CN112738132A (en) * | 2021-01-27 | 2021-04-30 | 华北石油通信有限公司 | Secondary authentication access system and method thereof |
Also Published As
| Publication number | Publication date |
|---|---|
| CN103684968B (en) | 2017-04-12 |
Similar Documents
| Publication | Publication Date | Title |
|---|---|---|
| EP2840743B1 (en) | Method and system for realizing virtual network | |
| CN102347993B (en) | Network communication method and equipment | |
| EP3021532B1 (en) | Method for realizing residential gateway service function and server | |
| CN102340546B (en) | IPv6 address distribution method and system | |
| CN101990773B (en) | Interworking between first and second authentication domains | |
| US20100182983A1 (en) | System and method for providing wireless local area networks as a service | |
| CN102136938B (en) | Method and device for providing user information for carried grade network address translation (CGN) equipment | |
| US10361970B2 (en) | Automated instantiation of wireless virtual private networks | |
| CN103685026A (en) | Virtual network access method and system | |
| CN102845123A (en) | Virtual private cloud connection method and tunnel proxy server | |
| CN105264835A (en) | Gre tunnel implementation method, access device and convergence gateway | |
| CN106878133B (en) | Message forwarding method and device | |
| CN102394889A (en) | Network server access method and access system | |
| CN107769939B (en) | Network element management method, network management, gateway network element and system in data communication network | |
| CN102404293A (en) | Dual-stack user managing method and broadband access server | |
| CN104144096A (en) | Virtual network layer construction method, device and system | |
| CN107241454A (en) | A kind of method for realizing address administration, device, aaa server and SDN controllers | |
| CN111431787B (en) | Tunnel establishment method and device and computer readable storage medium | |
| CN110493337A (en) | Data access method, gateway, system, storage medium and device | |
| CN102959906A (en) | Routing method and device for host in multi-homing site | |
| CN103684968A (en) | Access network deployment method, terminal equipment, network core equipment and system | |
| CN102651862B (en) | IP (Internet Protocol) address configuration method of WAP (Wireless Application Protocol) gateway and equipment thereof | |
| US20140181279A1 (en) | Virtual Console-Port Management | |
| EP2183710A1 (en) | System and method for automatic tariff negotiation | |
| CN104243625A (en) | IP address distribution method and device |
Legal Events
| Date | Code | Title | Description |
|---|---|---|---|
| PB01 | Publication | ||
| PB01 | Publication | ||
| C10 | Entry into substantive examination | ||
| SE01 | Entry into force of request for substantive examination | ||
| GR01 | Patent grant | ||
| GR01 | Patent grant |